Field Guide to Building an Operational Technology Cybersecurity Capability
summary
Provides a practical, four‑stage method—discovery, risk prioritization, policy and equipping, testing—with concrete actions: do site visits, build OT‑specific IR playbooks, and create test labs or vendor test cases. Cites standards (NIST, IEC 62443, NERC CIP), tools (RedSeal, SOC tooling), and partners (ISACs, National Labs). Calls out hard numbers: 15% of CSOs own OT, industrial automation ~10% CAGR, enterprises see ~174,000 alerts/week with <40% triaged, and user bypass rates ~69–74%. Emphasizes risk‑based patching, vendor/ownership models, and OT staff training as the highest‑leverage fixes.
AI-written summary · about
chapters (9)
- 0:00Introduction to OT cybersecurity
- 1:05Defining operational technology
- 3:14Challenges in OT cybersecurity
- 10:43Building an OT cybersecurity program
- 12:29Discovery methods in OT
- 19:20Vulnerability management in OT
- 26:17Policy and equipping for OT security
- 36:46Tooling and testing for OT environments
- 42:11Q&A on OT cybersecurity
related talks
50mHarmonizing IT and OT Security in the Era of Convergence
11mExploring the Security Culture of Operational Technology (OT) Organisations...
53mCXO Panel: OT & IoT Risk Management Strategy For CISOs
29mRed Team Operations in OT: A Peek Behind the Curtains of Hacking Industrial Systems
59mThe Cyber Physical War – Lessons From the Digital Front Line
11mKeynote
57mDon’t Forget the Little Guy: Vulnerability Management in Operational Technology
30mForced Digital Transformation and the Realities to ICS/OT Cybersecurity